1
response

Hello,

My NXLog-ce-2.11.2190 stops sending logs after network disconnect and reconnect.

Last logs:
2021-10-05 11:40:09 INFO nxlog-ce-2.11.2190 started
2021-10-05 11:53:29 INFO reconnecting in 1 seconds
2021-10-05 11:53:29 ERROR om_udp apr_socket_send failed; Został dostarczony nieprawidłowy argument.
2021-10-05 11:53:30 ERROR couldn't connect to udp socket on 10.2.1.159:9000; Próba przeprowadzenia operacji, wykonywanej przez gniazdo, na nieosiągalnej sieci.

Config:

<Extension _gelf>
Module xm_gelf
</Extension>

<Input in>
Module im_msvistalog
<QueryXML>
<QueryList>
<Query Id="0">
<Select Path="Security">*</Select>
<Select Path="Microsoft-Windows-UniversalTelemetryClient/Operational">*</Select>
</Query>
</QueryList>
</QueryXML>
</Input>

<Output out>
Module om_udp
Host 10.2.1.159
Port 9000
OutputType GELF
</Output>

<Route 1>
Path in => out
</Route>

System: Windows 10 Pro version 2004 on VMware vSphere 7.0

It is exactly the same question like here: https://www.mail-archive.com/nxlog-ce-users@lists.sourceforge.net/msg00970.html
but I'm using the latest version of NXLog-CE.

Any ideas, please...?

AskedOctober 5, 2021 - 1:12pm

Answer (1)

Hey,

I've just tested some simple UDP scenarios and everything went fine, which makes me suspect it might be something on the Graylog side.

Would you consider switching to TCP? It's a better choice anyway, hence, it won't hurt to check it.

Best regards,
Raf